Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File:                     vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier:          bd2lkKrQsfnkr09PeN9uMW5qv3xj5CGEXzXq7d3t7jA=
Subject key identifier:   6D:6E:17:19:05:B8:07:64:F3:AA:4D:3C:CD:70:55:CE:E6:0E:CC:5B
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer:       /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial:       01A123C1F18D53A88389FEE306A794A40034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number:          0964
Signing time:             Sat 10 Oct 2026 03:01:15 +0000
Manifest this update:     Sat 10 Oct 2026 03:01:15 +0000
Manifest next update:     Sun 11 Oct 2026 03:01:15 +0000
Files and hashes:         1: Ivg6snMydNXdySu3QX12mNo28u8.roa (hash: j9c4g1fOAHiMBPWaG5AigoutzfZxb4EuhkBYBF49VwY=)
                          2: i69vJEQPkDcWZtUI4FCC2gJOc0U.roa (hash: D7g5fdfmMlJvg4w+bYuZp2xJXQeTRhu8e3EybLceqmw=)
                          3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: U7XV3BGxOCBZeFywFNdaz2pOlfAGZWmMJTFMzcups4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:c1:f1:8d:53:a8:83:89:fe:e3:06:a7:94:a4:00:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
        Validity
            Not Before: Oct 10 03:01:15 2026 GMT
            Not After : Oct 11 03:01:15 2026 GMT
        Subject: CN=6d6e171905b80764f3aa4d3ccd7055cee60ecc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:0a:78:e8:d3:4f:ae:04:68:c0:c1:64:91:
                    ee:58:c6:84:4f:60:04:fd:6a:47:12:7d:2d:4e:30:
                    44:cf:20:7e:4a:cf:0d:1e:5b:b9:73:54:9a:e6:b1:
                    7e:b6:2e:b3:0a:d8:25:e6:dc:22:53:36:b9:33:74:
                    d4:bf:cd:7f:58:44:fa:1a:5c:36:86:14:f2:45:3b:
                    1c:89:16:6c:5f:9e:75:28:33:43:01:3c:e7:0a:18:
                    0a:7a:1e:a8:a1:f1:b4:67:fb:1d:68:15:3b:75:34:
                    9e:fb:df:72:cb:76:86:bc:0b:14:d2:ab:2e:29:94:
                    c1:e4:2d:68:82:f6:99:b4:ed:61:a5:20:da:b8:76:
                    f3:1a:e0:9b:8e:95:9a:3b:cf:e5:cc:15:ba:15:a8:
                    67:dd:d2:f8:d9:12:fb:65:e5:77:72:7e:de:ca:e9:
                    b1:84:1e:91:49:b6:cb:70:db:f6:8a:25:0f:08:03:
                    03:bf:b2:4f:b5:46:be:03:6a:b0:af:d4:5c:47:03:
                    c4:90:eb:a8:28:6d:f0:b7:f5:8c:ee:dd:63:7f:06:
                    4f:1a:36:cd:c8:41:48:16:1f:0c:fc:3b:a1:46:07:
                    20:ed:ab:96:ef:6d:5c:0c:57:ed:4e:ab:58:23:3e:
                    ea:94:13:07:8f:45:91:89:6e:00:b0:28:d9:c1:49:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:17:19:05:B8:07:64:F3:AA:4D:3C:CD:70:55:CE:E6:0E:CC:5B
            X509v3 Authority Key Identifier:
                keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:64:bf:02:33:7d:08:1c:94:1d:42:d1:e3:18:7e:c1:e6:38:
         75:4b:1c:75:39:07:ed:63:93:0b:09:ba:20:61:15:4b:91:b0:
         55:9d:29:ce:05:9a:c8:ae:45:2f:ca:5e:3a:86:5e:41:94:88:
         dc:5a:65:11:e2:3e:cb:fa:43:7a:9c:88:12:bd:bb:2c:a1:ad:
         49:2a:e6:fd:4f:71:a0:bb:79:31:f1:f8:8d:0f:83:dd:9d:71:
         28:7c:6f:70:03:db:6a:15:77:b6:16:3e:68:ad:d5:83:70:3e:
         cf:e4:f3:f8:ee:0a:c2:04:87:19:c1:09:8e:4f:a1:20:7a:07:
         5c:2a:7b:47:7c:5a:4f:07:b2:c6:58:fa:5c:d7:32:d5:1d:24:
         be:3f:51:5f:66:50:ca:54:49:7d:62:a3:de:4e:d2:14:84:59:
         4c:fa:f3:50:21:82:68:f5:1a:db:95:07:cc:f0:3e:39:7c:a7:
         b0:c8:95:a5:34:7c:17:f5:fd:16:5b:ac:33:81:c9:8f:75:6a:
         75:98:3e:da:dd:c4:ba:84:80:6c:16:32:05:fa:aa:24:c3:d9:
         9b:c8:12:51:65:61:01:f0:0a:37:7b:81:59:c0:46:ea:f2:0f:
         77:06:cb:2f:e1:05:f5:f2:e9:58:c4:83:34:e5:4d:e0:38:14:
         e4:26:21:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEjwfGNU6iDif7jBqeUpAA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0
MjNkNjgwHhcNMjYxMDEwMDMwMTE1WhcNMjYxMDExMDMwMTE1WjAzMTEwLwYDVQQD
Eyg2ZDZlMTcxOTA1YjgwNzY0ZjNhYTRkM2NjZDcwNTVjZWU2MGVjYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPAKeOjTT64EaMDBZJHuWMaET2AE
/WpHEn0tTjBEzyB+Ss8NHlu5c1Sa5rF+ti6zCtgl5twiUza5M3TUv81/WET6Glw2
hhTyRTsciRZsX551KDNDATznChgKeh6oofG0Z/sdaBU7dTSe+99yy3aGvAsU0qsu
KZTB5C1ogvaZtO1hpSDauHbzGuCbjpWaO8/lzBW6Fahn3dL42RL7ZeV3cn7eyumx
hB6RSbbLcNv2iiUPCAMDv7JPtUa+A2qwr9RcRwPEkOuoKG3wt/WM7t1jfwZPGjbN
yEFIFh8M/DuhRgcg7auW721cDFftTqtYIz7qlBMHj0WRiW4AsCjZwUmbpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1uFxkFuAdk86pNPM1wVc7mDsxbMB8GA1UdIwQY
MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt
NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi
LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGS/AjN9
CByUHULR4xh+weY4dUscdTkH7WOTCwm6IGEVS5GwVZ0pzgWayK5FL8peOoZeQZSI
3FplEeI+y/pDepyIEr27LKGtSSrm/U9xoLt5MfH4jQ+D3Z1xKHxvcAPbahV3thY+
aK3Vg3A+z+Tz+O4KwgSHGcEJjk+hIHoHXCp7R3xaTweyxlj6XNcy1R0kvj9RX2ZQ
ylRJfWKj3k7SFIRZTPrzUCGCaPUa25UHzPA+OXynsMiVpTR8F/X9FlusM4HJj3Vq
dZg+2t3EuoSAbBYyBfqqJMPZm8gSUWVhAfAKN3uBWcBG6vIPdwbLL+EF9fLpWMSD
NOVN4DgU5CYhcA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:54:43 2026 by rpki-client